{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_4rmumau5mtxz","handle":"mcp-server-splunk","url":"https://wellknown.network/agents/mcp-server-splunk","links":{"self":"https://wellknown.network/agents/mcp-server-splunk/record.json","html":"https://wellknown.network/agents/mcp-server-splunk","markdown":"https://wellknown.network/agents/mcp-server-splunk/record.md","api":"https://wellknown.network/api/v1/agents/mcp-server-splunk","status":"https://wellknown.network/api/v1/agents/mcp-server-splunk/status","claim":"https://wellknown.network/agents/mcp-server-splunk/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-server-splunk/claim.json","badge":"https://wellknown.network/agents/mcp-server-splunk/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-server-splunk/history","tools":"https://wellknown.network/api/v1/agents/mcp-server-splunk/tools"},"ard":{"identifier":"urn:air::server:mcp-server-splunk","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-server-splunk","summary":"A Model Context Protocol server for Splunk - search, manage, and analyze Splunk data via LLMs","description":"# Splunk MCP Server\n\nSearch and manage Splunk from Pi, Claude Code, and Codex using [MCP](https://modelcontextprotocol.io/).\n\n## Connection\n\nInstall [uv](https://docs.astral.sh/uv/getting-started/installation/), then run **one** of these Bash examples. Replace `localhost` with your Splunk hostname.\n\n**Token:**\n\n```bash\nexport SPLUNK_HOST=localhost\nread -rsp 'Splunk token: ' SPLUNK_TOKEN; echo\nexport SPLUNK_TOKEN\n```\n\nCreate a token in Splunk Web: **Settings → Tokens → New Token**.\n\n**Or username/password:**\n\n```bash\nexport SPLUNK_HOST=localhost\nunset SPLUNK_TOKEN\nexport SPLUNK_USERNAME=your-username\nread -rsp 'Splunk password: ' SPLUNK_PASSWORD; echo\nexport SPLUNK_PASSWORD\n```\n\nLaunch your client from the same terminal. Restart it if it is already running.\n\n## Installation\n\n### Pi\n\n```bash\npi mcp add splunk -- uvx mcp-server-splunk@latest\npi mcp list\npi\n```\n\n### Claude Code\n\n```bash\nclaude mcp add --transport stdio --scope user splunk -- uvx mcp-server-splunk@latest\nclaude mcp list\nclaude\n```\n\n### Codex\n\nAdd to `~/.codex/config.toml`:\n\n```toml\n[mcp_servers.splunk]\ncommand = \"uvx\"\nargs = [\"mcp-server-splunk@latest\"]\nenv_vars = [\n    \"SPLUNK_HOST\", \"SPLUNK_PORT\", \"SPLUNK_SCHEME\",\n    \"SPLUNK_TOKEN\", \"SPLUNK_USERNAME\", \"SPLUNK_PASSWORD\",\n]\n```\n\n```bash\ncodex mcp list\ncodex\n```\n\n## Configuration\n\n| Variable | Default | Purpose |\n|----------|---------|---------|\n| `SPLUNK_HOST` | `localhost` | Splunk hostname, without scheme or port |\n| `SPLUNK_PORT` | `8089` | Management API port |\n| `SPLUNK_SCHEME` | `https` | `http` or `https` |\n| `SPLUNK_TOKEN` | — | Authentication token |\n| `SPLUNK_USERNAME` | — | Username when not using a token |\n| `SPLUNK_PASSWORD` | — | Password when not using a token |\n\nUse a token **or** username/password. A token takes precedence if both are set. The server does not load `.env` files automatically.\n\n## Tools\n\n91 tools cover searches, indexes, alerts, saved searches, dashboards, lookups, macros, KV Store, inputs, users, roles, apps, and server…","publisher":null,"homepage":"https://github.com/pahar0/mcp-server-splunk","repository":"https://github.com/pahar0/mcp-server-splunk","version":"0.3.0","license":"Apache-2.0","protocols":["mcp"],"tags":["ai","llm","mcp","model-context-protocol","splunk"],"pricing":null,"endpoints":[{"url":"pypi:mcp-server-splunk","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"dev.terminal","name":"Terminal & Shell","confidence":0.779,"provenance":"derived"}],"categories":["dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-server-splunk","registry":"pypi","observedAt":"2026-10-28T14:24:26.014Z","publishedAt":"2026-10-24T16:23:26.048810Z","latestVersion":"0.3.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-server-splunk","url":"https://pypi.org/project/mcp-server-splunk/","firstSeenAt":"2026-09-10T04:22:27.286Z","fetchedAt":"2026-10-28T14:22:22.018Z","normalizedAt":"2026-10-28T14:22:22.018Z"}]},"firstSeenAt":"2026-09-10T04:22:27.286Z","updatedAt":"2026-10-28T14:24:26.014Z"}