S
Splunk MCP
41
Stack Score
Editorial pick✓ Verified workingMCP server
Splunk MCP
Search + alert + dashboard ops in Splunk.
Best for
Best for security + ops teams running Splunk as SIEM or observability.
At a glance
- Pricing
- open-source
- Setup time
- 30 minutes
- Learning curve
- steep
- Last verified
- 5/25/2026
What we love
- ✓Splunk-maintained
- ✓Strong for enterprise SIEM use cases
- ✓Wide deployment
Where it falls short
- −SPL learning curve
- −License cost can be steep
- −Best with security-team approval
Pricing
✓ Pricing verified Jun 14, 20261 tier
Open-source
$0
perpetual
- ✓Apache 2.0
Overview
MCP server for Splunk Enterprise + Cloud — SPL search, alert mgmt, saved searches, dashboard ops. Splunk REST API token.
Key features
- ●SPL search
- ●Alert + saved searches
- ●Dashboard ops
- ●Index inspection
- ●REST API
Best use cases
SIEM investigation
Let Claude pull and analyze Splunk events during security investigations.
Saved-search mgmt
Maintain and update Splunk saved searches from chat.
Integrations
Similar tools
See all analytics →One AI Stack pick every week.
The tool we’d pay for this week, why we’d pay for it, and what we’d skip. No promo spam.