1. Conduid
  2. Developer Tools
  3. Splunk MCP Server
MCP server · Developer Tools

Splunk MCP Server

by · github.com/rsfl/splunk-mcp-server

Proof of Concept Splunk MCP server plus file MCP Server

Unclaimed MIT last commit a year ago devtools
InstallView source
49Fair

Scored 9 days ago · breakdown

About Splunk MCP Server

Splunk MCP Server is an MCP server published by rsfl in the Developer Tools category: proof of Concept Splunk MCP server plus file MCP Server.

The repository has 5 stars and 1 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/rsfl/splunk-mcp-server

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Splunk MCP Server

Powered by Claude · Grounded in docs

I know everything about Splunk MCP Server. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository yesterday. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
  • !Dependencies pinnedNo lockfile. Installs can pull different code over time.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

claudesplunkconnection splunkclaudeindexesexplore

splunk-mcp-server

Proof of Concept Splunk MCP server plus MCP file Server by Rod Soto

Environment

  • Windows 11 Home 10.0.26100 Build 26100
  • Claude Desktop (Windows 0.10.14)
  • Splunk 9.3
  • Node.js v8.17.0
  • NPM 10.9.2

Install Instructions

  • Install Node.js, NPM and Claude Desktop

  • Create a directory to store MCP files

  • Install dependencies

    • cd folder you created
    • npm init -y
    • npm install
    • npm install @modelcontextprotocol/server-filesystem
    • npm install @modelcontextprotocol/sdk
    • npm install splunk-sdk

  • Download the files (packages.json {npm dependencies}, claude_desktop_config.json {claude config}, splunk-server.js {mcp server code})

  • Place "claude_desktop_config.json" at "C:\Users*user*\AppData\Roaming\Claude"

  • Modify directories at desktop json file and splunk auth information

  • Remember to close and re open claude desktop for your changes to take effect (Use task manager in windows)

    Operation

    • Ask Claude if there are MCP Servers running, you should get an answer showing file and Splunk MCP Server running
    • Ask Claude for relevant indexes in your splunk instances or input SPL and ask cloude to execute it.
    • Windows paths need double backslashes (\) or forward slashes (/).
    • MCP servers are started automatically by Claude Desktop when it reads your config file - they don't start separately.
    • Ask a simple question as in how many files are inside the folder, Claude can read their content as well.
    • Have fun :)

    MCP Logs

    • Location of MCP Logs is "C:\Users*user*\AppData\Roaming\Claude\logs"

Note: This is a POC. Here are some links for MCP security

Also Splunk

README fetched from the repository yesterday. The original is authoritative.

Questions

About Splunk MCP Server

How do I install Splunk MCP Server?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Splunk MCP Server safe to use with an AI agent?

Its trust score is 49 out of 100 (fair). It passes 3 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Splunk MCP Server still maintained?

The last commit was a year ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.