{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_xzkkehqa7ume","handle":"mcp-opensearch","url":"https://wellknown.network/agents/mcp-opensearch","links":{"self":"https://wellknown.network/agents/mcp-opensearch/record.json","html":"https://wellknown.network/agents/mcp-opensearch","markdown":"https://wellknown.network/agents/mcp-opensearch/record.md","api":"https://wellknown.network/api/v1/agents/mcp-opensearch","status":"https://wellknown.network/api/v1/agents/mcp-opensearch/status","claim":"https://wellknown.network/agents/mcp-opensearch/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-opensearch/claim.json","badge":"https://wellknown.network/agents/mcp-opensearch/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-opensearch/history","tools":"https://wellknown.network/api/v1/agents/mcp-opensearch/tools"},"ard":{"identifier":"urn:air::server:mcp-opensearch","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-opensearch","summary":"Read-only MCP server for OpenSearch and OpenSearch Dashboards","description":"# mcp-opensearch\n\n```\n           /\\     /\\\n          /  \\___/  \\\n         / (o)   (o) \\\n        |   ~~ v ~~   |\n        |   `-----`   |         mcp-opensearch\n        |  /       \\  |         ─────────────────────────────────────\n        | |    ─    | |         Read-only MCP server for\n         \\|         |/          OpenSearch & OpenSearch Dashboards.\n          |         |           Fuzzy log hunting.\n         /|         |\\\n        / |         | \\\n       (  |         |  )~~~~~\n        \\_|_________|_/     ~~\n```\n\n[![PyPI](https://img.shields.io/pypi/v/mcp-opensearch)](https://pypi.org/project/mcp-opensearch/)\n[![Docker](https://img.shields.io/badge/ghcr.io-mcp--opensearch-blue)](https://ghcr.io/bunnyiesart/mcp-opensearch)\n\n> Read-only MCP server for OpenSearch and OpenSearch Dashboards — search, aggregate, and explore your log data from Claude Code or any MCP-compatible AI assistant.\n\n## Features\n\n- **17 tools** covering connectivity checks, index/field discovery, full-text search, aggregations, time-series histograms, numeric stats, PPL queries, index settings, document explain, comparative analysis, and a generic GET escape hatch\n- **3 investigation prompts** — reusable templates for common log analysis workflows (single-agent investigation, top-offenders sweep, baseline comparison)\n- **Parallel requests** — all tools support concurrent execution; Claude Code can fire multiple queries in a single turn (e.g. `opensearch_count` + `opensearch_terms` + `opensearch_search` simultaneously) for faster investigations\n- Two backends: OpenSearch Dashboards proxy (preferred) or direct OpenSearch REST API\n- Hard limits on search result size (default 200) and histogram bucket count (default 2,000) to protect cluster health\n- Text field aggregation warnings (fielddata heap pressure)\n- No-time-range warnings on potentially expensive full-history queries\n- Read-only write guard — only safe endpoints are in the allowlist\n- Configurable via environment variables or `~/.config/mcp-o…","publisher":null,"homepage":"https://github.com/bunnyiesart/mcp-opensearch","repository":"https://github.com/bunnyiesart/mcp-opensearch/blob/main/CHANGELOG.md","version":"0.3.3","license":"MIT","protocols":["mcp"],"tags":["claude","llm","logs","mcp","observability","opensearch"],"pricing":null,"endpoints":[{"url":"pypi:mcp-opensearch","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"dev.monitoring","name":"Monitoring & Observability","confidence":1,"provenance":"declared"}],"categories":["dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-opensearch","registry":"pypi","observedAt":"2026-11-03T14:24:05.364Z","publishedAt":"2026-07-31T12:23:40.613259Z","latestVersion":"0.3.3"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-opensearch","url":"https://pypi.org/project/mcp-opensearch/","firstSeenAt":"2026-09-10T02:24:31.003Z","fetchedAt":"2026-11-03T14:23:06.898Z","normalizedAt":"2026-11-03T14:23:06.898Z"}]},"firstSeenAt":"2026-09-10T02:24:31.003Z","updatedAt":"2026-11-03T14:24:05.364Z"}