About Opensearch MCP
Opensearch MCP is an MCP server published by AppliedIR in the Blockchain category: openSearch MCP server for forensic evidence indexing and querying.
The repository has 5 stars and 0 forks, with the last commit 13 hours ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/AppliedIR/opensearch-mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (17)
idx_aggregateGroup-by analysis (top processes, IP distribution, etc.)
Parameters not published.
idx_case_summaryComplete case overview: hosts, artifacts, fields, enrichment status
Parameters not published.
idx_countFast document counts with filters
Parameters not published.
idx_enrich_intelThreat intel enrichment via OpenCTI
Parameters not published.
idx_enrich_triageBaseline enrichment via windows-triage-mcp
Parameters not published.
idx_field_valuesEnumerate unique values in a field
Parameters not published.
idx_get_eventRetrieve a single document by ID
Parameters not published.
idx_ingestFull disk artifact ingest pipeline
Parameters not published.
idx_ingest_accesslogApache/Nginx access log ingest
Parameters not published.
idx_ingest_delimitedGeneric CSV/TSV/Zeek/bodyfile ingest
Parameters not published.
Show all 17 tools
idx_ingest_jsonGeneric JSON/JSONL ingest
Parameters not published.
idx_ingest_memoryVolatility 3 memory analysis
Parameters not published.
idx_ingest_statusMonitor running ingest operations
Parameters not published.
idx_list_detectionsDetection alerts (Hayabusa/Sigma)
Parameters not published.
idx_searchFull-text + structured queries across all artifact types
Parameters not published.
idx_statusIndex inventory: names, doc counts, sizes
Parameters not published.
idx_timelineDate histogram for temporal analysis
Parameters not published.
Ask AI
Ask AI about Opensearch MCP
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.